Lucene search

MitreCVE-2000-1173

HistoryJan 09, 2001 - 5:00 a.m.

CVE-2000-1173

2001-01-0905:00:00

mitre

web.nvd.nist.gov

cyberpatrol

weak encryption

network traffic

cve-2000-1173

credit card security

nvd.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.6%

JSON

Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.

Affected configurations

Nvd

Node

microsyscyberpatrolMatch4.04.003

microsyscyberpatrolMatch4.04.005

VendorProductVersionCPE
microsyscyberpatrol4.04.003cpe:2.3:a:microsys:cyberpatrol:4.04.003:*:*:*:*:*:*:*
microsyscyberpatrol4.04.005cpe:2.3:a:microsys:cyberpatrol:4.04.005:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsys	cyberpatrol	4.04.003	cpe:2.3:a:microsys:cyberpatrol:4.04.003:::::::*
microsys	cyberpatrol	4.04.005	cpe:2.3:a:microsys:cyberpatrol:4.04.005:::::::*

References

archives.neohapsis.com/archives/bugtraq/2000-11/0323.html

www.securityfocus.com/bid/1977

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.6%

JSON

Related for CVE-2000-1173